Answer some questions to find which federal programs can help you https://covid-benefits.alpha.canada.ca/. - Répondez à quelques questions pour trouver quels programmes d’aide financière fédéraux s’offrent à vous https://covid-prestations.alpha.canada.ca/.
MIT License
2
stars
4
forks
source link
[Snyk] Security upgrade dynamoose from 1.11.1 to 2.0.0 #551
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
Changes included in this PR
Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
package.json
package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity
Priority Score (*)
Issue
Breaking Change
Exploit Maturity
686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-OBJECTPATH-1017036
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: dynamoose
The new version differs by 250 commits.- 147b90f Merge pull request #841 from dynamoose/version/2.0.0
- 189ac96 Adding changelog for 2.0.0
- 0e67bd9 Bumping version to 2.0.0
- 6b6b0e9 Fixing publish error on latest
- 829304b Updating README branch strategy
- 28450c2 Removing breaking changes list
- 6222448 Fixing issue where deleting branch wouldn’t work
- 3b1d99d Fixing NPM polling for release
- 5801150 Merge pull request #838 from dynamoose/version/2.0.0-beta.12
- 5485177 Bumping version to 2.0.0-beta.12
- c11e0f4 Merge pull request #831 from dynamoose/readmeUpdates
- a33a863 Updating README
- bb6d7d1 Merge branch 'master' into readmeUpdates
- ba9ab74 Merge pull request #837 from dynamoose/projectUpdates
- 59577aa Merge branch 'master' into projectUpdates
- e1f5e21 Merge pull request #834 from dynamoose/documentRetrieverFix
- 3d18b42 Adding more detail to contributing guidelines
- a989a3f Adding link to documentation for v1
- 0597113 Updating organization name from dynamoosejs to dynamoose
- c0b802c Changing dynamoose.undefined to dynamoose.UNDEFINED
- e38ed03 Updating dependencies
- 4336a25 Merge branch 'master' into documentRetrieverFix
- a286d1c Merge pull request #835 from dynamoose/updateFixes
- 49ab53b Updating documentation for model update
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic